Please review: Bug 526141 - allow empty groups

[Rich Megginson]

https://bugzilla.redhat.com/show_bug.cgi?id=526141
    Resolves: bug 526141
    Bug Description: allow empty groups
    Reviewed by: ???
    Fix Description: Change groupOfNames and groupOfUniqueNames to allow 
empty
    groups by changing the member/uniqueMember attribute from MUST to MAY.
    NOTE: This is the way it was before 1.2.1 changed it.  Also note 
that this is a temporary hack until we solve the problem of LDAP 
grouping with a better solution, one that eases migration of existing 
installations.
    Platforms tested: RHEL5 x86_64
    Flag Day: no
    Doc impact: no
https://bugzilla.redhat.com/attachment.cgi?id=363112&action=diff